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Abstract 

An element a of the extension E of degree n over the finite field F = GF(q) is called free 
over F if {a, ofl , . . . , ofl } is a (normal) basis of E/F. The primitive normal basis theorem, 
first established in full by Lenstra and Schoof (1987), asserts that for any such extension E/F, 
there exists an element a G E such that a is simultaneously primitive (i.e., generates the 
multiplicative group of E) and free over F. In this paper we prove the following strengthening 
of this theorem: aside from five specific extensions E/F, there exists an element a G E such 
that both a and oT 1 are simultaneously primitive and free over F . Q 

1 Introduction 

Given q, a power of a prime p, denote by F the finite field GF(q) of order q, and by E its 
extension GF{q n ) of degree n. A primitive element of E is a generator of the cyclic group E* . 
Additively, too, the extension E is cyclic when viewed as an FG-module, G being the Galois 
group of E over F. The classical form of this result - the normal basis theorem - is stated as 
follows: 

Theorem 1.1 (Normal Basis Theorem). There exists an element a G E (an additive genera- 
tor) whose conjugates {a, ofl , . . . , ofl } form a basis of E over F . 

Such an element a is a free (or normal) element of E over F, and a basis of this kind is a 
normal basis over F. The key existence result linking additive and multiplicative structure is 
the primitive normal basis theorem: 

Theorem 1.2 (Primitive Normal Basis Theorem). For every prime power q and neff, there 
exists a G E, simultaneously primitive and free over F. Equivalently, there exists a primitive 
normal basis over F , all of whose members are primitive and free. 

Existence of such a basis for every extension was first proved by Lenstra and Schoof [7], 
completing work by Carlitz [T], [2], and Davenport [6]. A computer- free proof of this result 
was produced by Cohen and Huczynska [51 . The key to the transition to the more theoretical 
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and less computational approach realised in [5] was the introduction of sieving techniques (cf. 
Section [4J below). The question arises as to whether a yet stronger existence theorem concern- 
ing primitive and free elements can be proved unconditionally (or with very few exceptions) 
by means of such techniques. In this paper, we consider the following natural problem, first 
suggested to us by Robin J. Chapman (Exeter) (to whom we are grateful). 

Problem 1.3 (PFF problem). Given a finite extension E / F of Galois fields, does there exist 
a primitive element a of E, free over F, such that its reciprocal oT 1 € E is also primitive and 
free over F? If so, then the pair (q,n) corresponding to E/F is called a PFF-pair. 

Observe that, for a £ E, a is a primitive element of E if and only if a -1 is primitive; hence 
the four conditions in Problem 11.31 effectively reduce to three (a primitive and free, a -1 /ree). 

In this paper, we solve this problem completely: the answer is in the affirmative except for 
a small number of listed exceptions. We obtain the following strengthening of the Primitive 
Normal Basis Theorem. 

Theorem 1.4 (Strong Primitive Normal Basis Theorem). For every prime power q and n £ N, 
there exists a primitive element a of E, free over F, such that its reciprocal a^ 1 G E is also 
primitive and free over F, unless the pair (q, n) is one of 

(2,3), (2,4), (3,4), (4,3), (5,4). 

Towards Theorem 11.41 Tian and Qi |9] have given a proof provided n > 32 (when there 
are no exceptions). They use an elaboration of the method of Lenstra and Schoof [7] but 
do not employ any of the sieving techniques that are a feature of the present article and 
appear to be necessary for completion, particularly for small values of n. Moreover, because 
of the demanding nature of the PFF condition, fields of smallest cardinality require individual 
treatment. Our consideration of the general problem therefore takes place in the setting where 
q > 5 (even here, special care is needed for q — 5 and 7) , and we deal with the case 2 < q < 4 
in Section [7] "Very small fields" . In what follows, all non-trivial computation is performed 
using MAPLE (Version 10). Aside from the five genuine exceptions listed in Theorem 11.41 
there are 35 pairs (q, n) (with q < 13, n < 16) for which verification is by direct construction 
of a PFF polynomial: otherwise, the proof is purely theoretical. 

2 Reductions 

In this section, we formulate the basic theory and perform some reductions to the problem. 
As much as possible, we aim to make this account self-contained. 
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We begin by extending the notions of primitivity and free-ness. Let w G E* . Then w is a 
primitive element of E if and only if w has multiplicative order q n — 1, i.e., w = v d (w G E) 
implies (d, q n — 1) = 1. We extend this concept as follows: for any divisor m of q n — 1, we 
say that w G E* is m-free, if w = v (where v G 2? and d|m) implies d = 1. Thus to G E* is 
m-free if and only if w is not an Ith power for all primes I dividing to. It follows that w is 
m-free if and only if it is mo-free, where mo is the radical of to, i.e., the product of its distinct 
prime factors. In the context of the PFF problem, observe that w is m-free if and only if w^ 1 
is m-free since, if w^ 1 — v for some k\m and v G E* , then w — (t>~ 1 )' c and u _1 G E*. 

For w G E, the F-order of w is defined to be the monic divisor g (over F) of x n — 1 of 
minimal degree such that g a (w) = (<7 CT is the polynomial obtained from g by replacing each 
x l with X 9 ). Clearly, w is free if and only if the F-order of w is x n — 1 . If u> G 2? has F-order 
<?, then w = h a (v) for some v G 2?, where /i = a g ~ 1 . Let M be an F-divisor of x™ — 1. If 
w = h a (v) (where v G E, h is an F-divisor of M) implies h = 1 we say that u> is M-free in 
E. Again, M may be replaced by its radical. An important instance of this occurs when n 
is divisible by the characteristic p, say n = p b n* (where p \ n*), in which event w is x n — 1- 
free if and only if it is x n — 1-free. (The expansion of n = p b n* , as above, will be assumed 
throughout.) 

We remark that, in the sequel, most arguments concerning divisors of a given integer divisor 
of q n — 1 or polynomial divisors of a given factor of x n — 1 depend only on the appropriate 
radicals so that the divisors may be assumed to be square-free. To avoid awkward qualifications 
to these arguments, the reader is requested throughout to interpret all relevant statements 
accordingly. 

We make the following observation. 

Lemma 2.1. Let x d — w be an F -divisor of x n — 1 (w G F* , d\n). Then, for a G F* , 

(x d - w) CT (a) = & (x d - w^Yia- 1 ) = 0. 

In particular, if w G F* has F -order x + 1 or x — 1, then so does w^ 1 . 

If n — 2 and w G F* is primitive, then neither w nor w^ 1 can have F-order x ± 1 and so 
both are free over F. Henceforth, we assume n > 3. 

Lemma 2.2. Let n (> 5j be prime. Suppose that q is such that p j n and q (mod n) is a 
multiplicative generator of the cyclic group (Z/nZ)*. Then (q,n) is a PFF pair. 

Proof. Under the given circumstances, (n, q % — 1) = 1 for i = 1, . . . , n — 2 and n for i = n — 1; 
so x" — 1 factorizes into irreducibles over F as (x — l)(x™ _1 + x n ~ 2 + . . . +x + 1). By Theorem 
1.1 of [4], there exists a primitive element w £ E such that its trace over F, T(w) ^ and, 
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similarly, T(w 1 ) 7^ 0, i.e. neither w nor w 1 has F-order x n 1 + x n 2 + . . . + x + 1. Since w 
is primitive, neither w nor w" 1 can have F-order x — 1. □ 

Observe that Lemma applies to 0(n — 1) of the n possible congruence classes for values 
of q. The next result demonstrates the application of the lemma to some small values of n. 

Lemma 2.3. For the following values of q and n, the pair (q,n) is a PFF pair: 

(i) n = 5; q = 2 or 3 (mod 5). 

(ii) n = 7; q = 3 or 5 (mod 7). 

(hi) n = 11; q = 2, 6, 7 or 8 (mod 11). 

For any m| <? n — 1, and g, h\ x n — 1, denote by N(m, g, h) the number of non-zero elements 
iv G E such that w is m-free and g-free, and w _1 is /i-free (note that w^ 1 is automatically 
m-free). As a consequence of the earlier discussion, we may replace to, g or /i by their radicals 
at any time. To solve the PFF problem it would suffice to show that N(q n — l,x n — 1, x n — 1) 
is positive, for every pair (g, n); however, it is useful to refine this requirement. 

For a given pair (q,n), define Q := Q(q,n) to be (the radical of) ( g _i)g cd (n ■ As in [7] 
and 0], we now demonstrate that q n — 1 may be replaced by Q, i.e. it suffices to show that 
N(Q,x" — l,x n — 1) is positive. The following lemma, analogous to Lemma 2.1 of [5], makes 
this relationship explicit. 

Lemma 2.4. For any pair (q,n), 

N{Q, x n -l,x n -l) = -^N(q n - l,x n -l,x n - 1), 

where cj> denotes Euler's function, and R is the greatest divisor of q n — 1 co-prime to Q. 

Proof. Let Q* := (q n — 1)/R: then Q* is the greatest divisor of q n — 1 whose prime factors 

are those of Q. Moreover, Q\ Q* , i?| (g— l)(n,q — 1)| (q — l) 2 , and (R,Q*) = 1. In particular, 

if 7(g -E*) is an i?-th root of unity, then c := 7 s-1 e F*, and j q = 0*7, for every i. It follows 

that, if a e £ and 7 is any i?-th root of unity, then a is x" — 1 free if and only if 7a is x" — 1 

free. (Indeed, for any fc, with < k < n, 

fc fc 
^ai(7a) g =0 ^2aiC l a q =0, a , . . . , a k , c e F.) 

i=0 1=0 

Now, any element a £ E* can be expressed uniquely as the product of a Q*-th root of 
unity ao and an i?-th root of unity (in E*). By the above, if a is Q-free and both a and oT x 
are x n — 1-free, then jao is also Q-free with 7010 and its inverse both x n — 1-free, for any i?-th 
root of unity 7. If in fact a is primitive, then a — 70^0, for some primitive i?-th root of unity, 
7. □ 
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The following result will prove useful. 

Lemma 2.5. (i) Assume n = 4 and q = 3 (mod 4). Then N(Q, x 4 - 1, x 4 - 1) = N(Q, x 2 - 
l,x 2 -l). 

(ii) Assume n — 3 and q = 2 (mod 3). Then N(Q, x 3 — 1, a; 3 — 1) = N(Q, x — l,x — 1). 

Proof. Take the case with n = 4, so that x 2 + 1 is irreducible over F. Suppose that a is Q-free 
and x 2 — 1-free and a" 1 is x 2 — 1-free, but a is not x 4 — 1-free. Then a = (3 q + j3, and hence 

2,2-, 

ofl — a, i.e., ofl = 1. Thus a is contained in the quadratic extension of F and so cannot 
be primitive. The same argument ensures that a -1 is also x 4 — 1-free. The "n — 3" case is 
exactly analogous. □ 



3 An expression for N(m, g, h) 

In this section, we employ character sums to obtain expressions, and thence estimates, for the 
number of elements of the desired type. We suppose throughout that m\Q and g, h\x n — 1, 
where, if desired, these can be assumed to be square-free. We begin by establishing character- 
istic functions for those subsets of E comprising elements that are m-free, g-free or /i-free. 

I. The set of w € E* that are m-free. 

Let E*{= E*) denote the group of multiplicative characters of E* . For any d\Q, we write 
% for a typical character in E* of order d. Thus r]i is the trivial character. Notice that, since 
d\ q q Z\ i the restriction of rjd to F* is the trivial character i^i of F*. 

We employ the following notation for weighted sums (cf. [5]). For m\Q, set 




where 4> and /j, denote the functions of Euler and Mobius respectively and the inner sum 
runs through all <fi(d) characters of order d. (Note that only square-free divisors d have any 
influence.) Then, according to a formula developed from one of Vinogradov, the characteristic 
function for the subset of m-free elements of E* is 

6(m) f r) d (w), weE*, (3.1) 
where 8(m) :— = \\ (1 — ^~ 1 )- (In Vinogradov's original formula characterising 

Z|m, I prime 

primitive roots of a prime p, (13. ip holds with m = p — 1.) 
II. The set of w £ E that are g-free or h-free over F. 
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Let A be the canonical additive character of F. Thus, for x G F, 

X(x) = exp(27rir FiFp (a;)/p), 

where p is the characteristic of F and Tf,w p denotes the trace function from F to F p . 

Now let x be the canonical additive character on E; it is simply the lift of A to E, ie. 
x( w ) — ^(T(w)), w G E. For any (monic) F-divisor D of x n — 1, a typical character xd 
of F- order D is one such that xd f CT is the trivial character in J5, and D is minimal 
(in terms of degree) with this property. For any 8 G E, let xs be the character defined by 
Xs(w) — x{Sw),w G E. Define the subset of E as the set of 5 for which xs has F-order 
F>. So we may also write xs D for Xd, where Sd G Ad; moreover {xs D ■ Sd G Ad} is the 
set of all characters of order D. Note that Ad is invariant under multiplication by F* , and 
that, if D = 1, then = and xd — Xo> the trivial character. There are <£(£>) characters 
Xd, where $ is the Euler function on F[x] ($ is multiplicative and is given by the formula 
$(F>) = \D\ Y[ (1 — I-P| _1 )j where the product is over all monic irreducible F-divisors of D 

P\D 

and \D\ = q dc ^). 

In analogy to I, for g \x n — 1, define 




where fi is the Mobius function on F[x] and the inner sum runs through all $(F)) elements 
Sd of Ad (only square-free D matter). With the notation @(g) = the characteristic 

function of the set of g-free elements of E correspondingly takes the form 

0(5) / X5 D {w), WEE. 

D\g 

Using these characteristic functions, we derive an expression for N(m, g,h) in terms of 
Kloosterman and Gauss sums on E and F. For any a, [3 G E and any multiplicative character 
r\ G E*, we define the generalized Kloosterman sum K(a,{3;rf) (= K q ^ n (a, f3; rf)) by 

K(a,P;ri)= £ x(^C + PC'MO- 

Ce-E* 

In particular, we write K(a,/3) for K(a, /?; 571 ), the (standard) Kloosterman sum. 
For any 77 G E* , we define the Gauss sum G(7j) (= Gn,q(f])) over by 

It is clear that some Kloosterman sums will reduce to Gauss sums. 

In what follows, we will use the following properties of Kloosterman and Gauss sums. For 
further details, the reader is referred to [1] or a reference book such as [S]. 
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Lemma 3.1. Let n be a multiplicative character of E. Then 

K(0,0; V ) = 



q n -l, ifv = Vi, 
0, otherwise. 



Further, if either rj ^ r\\ or a, e E are not both zero, then 

\K(a,0;r 1 )\<2q%. 
Lemma 3.2. (i) If a 0), e E, then 

K(a,0;r,)=fj(a)K(l,a0;r,). 

(it) If 0^0, then K(O,0; V ) = r)(0)G(fj). 
(Hi) If a ^ 0, then K(a, 0; 77) = fj(a)G(rj) . 
Lemma 3.3. (i) G(r/i) = -1. 

(it) If r]^ n 1; then \G(r])\ = q% . 
Proposition 3.4. Assume that m is a divisor of Q, and g, h are divisors of x n — 1. Then 

N(m,g,h)=6(m)G(g)G(h) J J J K(S Dl ,S D2 ; Vd ). 

d\m D x \g D 2 \h 

Proof. Using the characteristic functions derived above, we have 
N(m,g,h)= U™) / %H e (-9) / Xfo.W ©W / Xfc> _1 ) ■ (3.2) 

WeE * V d\m ) V D 1 \g J V D 2 \h J 

Thus 

N(m,g,h) = 6(m)Q(g)Q(h) f J J ^ x (S Dl w + J^uT 1 )^), 

d\m D t \g D 2 \h weE " 

and the result follows from the definition of the generalized Kloosterman sum. □ 



^From this, we obtain the following expression. 
Proposition 3.5. Assume that m and g are divisors of Q and x n — 1 respectively. Then 

N(m,g,h) = e(m)Q(g)Q(h) x 

(q n + e + J J Vd(S Dl )G( Vd ) + J J %(fe 2 )G(%) 

d\m, Di\g, d\m, D 2 \h. 

d^l Di^l d^l D 2 =£l 



J J K(5 Dl ,5 D2 )+ JJJ K(S Dl ,S D2 : Vd )y (3.3) 



D t \g, D 2 \h, d\m, D t \g, D 2 \h, 



where 

{-1, ifg = h = l, 
+1, i/g^ 1 and /i 7^ 1, 
0, otherwise. 

Proof. We combine the formulation of Proposition 13.41 with the results of Lemma l3~T| Lemma 
13.21 and Lemma 13.31 If d — 1, then the Kloosterman sum takes the value q n — 1 when 
Di = L>2 = 1, rii(8rj 2 )G(rfi) = —1 when D\ = 1 and Z?2 7^ 1, and 7yi(^-Di)G(?7i) = —1 when 
Z?2 = 1 and Di ^ 1. If d ^ 1, then we obtain a contribution of when D\ = D 2 = 1, 
q nd{^D 1 )G{rid) when Di / 1 and D 2 = 1, and rj d {5D 2 )G{rfd) when L>i = 1 and D 2 ^ 1. 
Note that the e term in the statement of the result arises from the situation when d = 1, 
Di = 1 and Dj ^ 1 (where {i,j} = {1,2}); for example in the "Z?i = 1" case we have 
J (—1) = — J2d 2 \Ii mC^i); which takes value when h = 1 and 1 when h 7^ 1. □ 

D 2 \h,D 2 ^l 

^From Proposition 13.51 and the size of the Kloosterman and Gauss sums, we immediately 
derive a lower bound for N(m,g, h). Write W(m) = 2^™) for the number of square- free 
divisors of m, where lo counts the number of distinct primes in m, and similarly define W(g). 

Corollary 3.6. Under the conditions and with the notation of Provosition [3~5l 

N(m,g,h) > 0{m)<d{g)<d{h){q n + e 

- q n/2 [2W(m)W(g)W(h) - (W(m) + l){W{g) + W{h)) + 2].) 

In the case when g = h, this inequality takes the form 

N(m,g,g) > 6(m)®{gf (f + e g - 2q n ' 2 {W{m)W(g) - l)(W(g) - 1)) (3.4) 

where 

\ -1, if 9=1, 
{ +1, if 9^1- 

In particular, 

N(m, g, h) > 9(m)e(g)e(h)q n ^(q n / 2 - 2W (m)W (g)W (h)) . (3.5) 

Proof. The bounds of Lemmas 13.11 and 13.21 yield for the sum of the "integrals" in the identity 
(|3.3p the absolute bound 

2(W(m) - l)(W(g) - l){W{h) - 1) + 2{W{g) - l){W{h) - 1) + (W(m) - l){W{g) + W{h) - 2). 

Rearrangement gives the result. □ 

The following simple bound for W(m), the number of square-free divisors of ra € N, will 
be useful in what follows. The proof is immediate using multiplicativity. 



8 



Lemma 3.7. For any positive integer m, 

W{m) < c m m 1/4 , 



(3.6) 



where c m — 



and pi, . . . ,p s are the distinct primes less than 16 which divide m. 



In particular, for all m G N, c m < 4.9, and for all odd m, c m < 2.9. 

In what follows we recall the notation n* defined by n — p b n* , p\ n*. 

Proposition 3.8. Let q be a prime power and let n(> 3) € N with n* < 4. Suppose, in 
addition, q = 2 (mod 3) if n* = 3, and q = 3 (mod 4) if n* — 4. The pairs (g, n) = (2, 3), (2, 4) 
and (3, 4) are not PFF. Otherwise, (g, n) is a PFF pair. 

Proof. We have Q(q, n) < q n / gcd(n, q — 1), where, under the given conditions, 

gcd(n,q - 1) = 



1, if n* = 1 or 3, 

2, if n* = 2 or 4. 



Moreover, N(Q,x n — l,x n — 1) = N(Q, g(x), g(x)), where g factorizes into i^-irreducibles as 

x — 1, if n* = 1 or n* = n = 3, 

(x-l)(x + l), iin*=2 or n* = n = 4, 

(a; - l)(a; 2 + £ + 1), if n* — 3 < n, 

(x - l)(.x + l)(x 2 + 1), ifn*=4<n, 

using Lemma T2 . 5 1 when n = 3 or 4. It follows from Corollary 13.61 and Lemma T3. 71 that N :— 
N(Q, x n — 1, x n — 1) is positive whenever 



<?i > 2(W(Q)W(g) - l){W(g) - 1) - e fl <f 



and hence whenever 



where 



(q n (q~l)) 1/4 >Ac Q 



(3.7) 



(3.8) 



A= < 



4, if n* = 1 or n* = n = 3, 

2~ -3, if n* = 2 or n* = n = 4, 

24, if n* = 3 < n, 
2t • 7 if n* = 4 < n. 

We now consider when (|3 . 8[) holds for each of the values of A, using an appropriate bound for 
cq. We use notation like (qo+, ?io+) to signify any pair (q, n) with q > q$, n > uq. 

• Assume A = 4. Then (O holds with c Q < 4.9 for (3+,ll+), (4+,8+), (5+,7+), 
(7+,6+), (8+,5+), (13+, 4+), (23+, 3+); with c Q < 2.9 for (2,15+); and with c Q < 3.2 for 
(3,9) (when 3 { Q). For n* — 1, direct application of inequality (|3.7p establishes the result for 
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(5,5), (8,4) and (4,4) (for this last, (pTT)) reduces to 16 > 14), leaving only the pairs (2,4), 
(2,8) and (3,3). When q = 2, one of the sole reciprocal pair of primitive quartics has zero 
trace so there does not exist a PFF polynomial. Otherwise, a PFF polynomial for the case 
(2,8) is given in Section 17731 one for (3,3) is in Section [7721 For the case n = n* = 3, inequality 
(|3.7p establishes the result for (17, 3), (11, 3), (8, 3) and (5, 3). When q = 2 one of the pair of 
primitive cubics has zero trace so there does not exist a PFF polynomial. 

• Assume A = 2^ . 3. Then |(3]SJ> holds with c Q < 4.9 for (3+, 17+), (4+, 13+), (5+, 11+), 
(6+, 10+), (7+, 9+), (8+, 8+), (11+, 7+), (14+, 6+), (22+, 5+), (40+, 4+); and with c Q < 3.2 
for (3, 15+). For the case n* = 2, direct application of inequality (13. 7| establishes the result for 
(5,10) and (9,6), leaving only the pair (3,6). When n* = n = 4, inequality (|3.7p establishes 
the result for (31,4), (27,4) and (23,4) (for which W(Q) < 16) and (19,4) (W(Q) < 8). This 
leaves pairs (11,4) and (7,4), (3,4). When q = 3 there are 4 primitive quartics with non-zero 
traces, namely /(±aj) where f(x) = x 4 + x 3 + x 2 — x — 1, together with their reciprocals. None 
is a PFF polynomial. On the other hand, direct verification yields PFF polynomials as follows. 



(q,n) 


PFF polynomial 


(11,4) 


x 4 + x 3 - 5x + 2 


(7,4) 


x 4 + x 3 — x 2 — x — 2 



• Assume A = 24. Then flSTJ) holds with c Q < 4.9 for (16+, 6+), (5+,12+), and (2,25+). 
Inequality (|3.7|) establishes the result for (8,6): for q = 2, degrees 6, 12 and 24 are treated in 
Section 17.31 

• Assume A = 2t . 7. Then (J3l§ holds with c Q < 4.9 for (7+,12+), (4+,20+) and 
(3+, 22+). This leaves the pair (3, 12) which is treated in Section 17721 

□ 

4 The sieve 

In this section, we introduce our key tool: a sieve with both additive and multiplicative com- 
ponents. For a given pair (q,n), let f\x n — 1 and g\y n — 1. Let mi, . . . ,m r be factors 
of m, for some r > 1, and let f%, . . . , f r and g±, . . . , g r be factors of / and g respectively. We 
call {(mi, fi, gi) . . . , (m r , f r , g r )} a set of complementary divisor triples of (m, /, g) with com- 
mon divisor triple (mo, fo, go) if the primes in lcm{TOi, . . . , m r } are precisely those in m, the 
irreducibles in lcm{/i, . . . , f r } are precisely those in /, the irreducibles in lcmjgi, . . . , g r } are 
precisely those in g and, for any distinct pair (i,j), the primes and irreducibles in gcd(raj, rrij), 
gcd(/i, fj) and gcd^, gj) are precisely those in m , fo and go respectively. Observe that the 
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value of N(m, f, g) depends only on the primes and irreducibles present in m, / and g. The 
following result extends Theorem 3.1 of [3 . 

Proposition 4.1 (Sieving inequality). For divisors m of Q, f of x n — 1 and g of y n — I, 

let {(mi, /i, gi), . . . , (m r , fr,9r)} be a set of complementary divisor triples of (to, f,g) with 
common divisor triple (mo, fo, go)- Then 

N(m,f,g)> (j^NimtJi,^ - (r - l)N(m , f , g ). (4.1) 

Proof. When r = 1, the result is trivial. For r = 2, denote the set of elements w G E* such 
that w is TO-free and /-free and w~ l is g-free, by S m j tg . Then S mi j ltgi U<S TO2j / 2!ff2 C S mo j 0tgo , 
while S mu f ugi H Sm 2 j2,g2 = Smj,g, and the inequality holds by consideration of cardinalities. 
For r > 2, use induction on r. □ 

We observe that, in Proposition 14.11 mfg can be regarded as a formal product whose 
"atoms" are either prime factors of Q or irreducible factors of x n — 1 or y" — 1. Write k for 
the (radical of) mfg and ko for (that of) TOo/offo; we shall refer to ko as the core of Also 
write N(k) for N(m,f,g) (so that, in a natural sense, W(k) — W(m)W(f)W(g)). Consider 
an application of the sieve in which, for each i = 1, . . . , r, m^f^g^ runs through the values of 
koPi as ft runs through atoms of k not in fco. We shall call this a (ko,r) decomposition of k. 
Given a (fco, r) decomposition, define (5=1 — 531=1 J^TJ with |f>| = p when p is a prime (integer) 
and \p\ = q desp when p is an irreducible polynomial and set A = + 2. As we shall see, it 
is crucial that S is positive for the (ko,r) decomposition selected. In particular, when r = 1 
(the non-sieving situation) , then (|4.ip is a trivial equality, W^fc) = 2W(ko) and A = 2. 

Proposition 4.2. In the above notation, for a given pair (q, n), let k denote the formal product 
mfg, where m\Q, f\x n — 1 and g\y n — 1. Suppose that 

q > (2VF(fc)) 2/Tl . (4.2) 

Then N(k) is positive. 

More generally, for a {kg,r) decomposition as described above, suppose that S is positive 
and 

q > (2W(k )A) 2/n . (4.3) 

Then N(k) is positive. 

Proof. The non-sieving criterion (|4.2I) follows immediately from (|3 . 5[) of Corollary [ 
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For (JOJ), define Q(k) = 6(m)9(f)Q(g) and write gT]i in the form 
N(k) > SN(k ) + ^2 (mkoPi) - (l - -) AT(fco) 



SQ(k ) 



( _ \ 

q" + U(d) 
d\k 



i „„ , i—1 d\k p z 

\ d^l ) d\k a 

where the sums over d are over "square-free" formal factors of the formal products ko and 
koPi and, by the estimates of Lemmas 13.11 and 13.31 (as already used in Corollary 13. 6p . each of 
the expressions U(d) and Ui(d) in absolute value do not exceed 2q n l 2 . Granted that 8 > 0, it 
follows that N(k) is positive whenever 

Sq n/2 > 2SW(k ) + 2Y / (W(k oPl ) - W(k )) (l - -) . 



The result follows since W(k pi) - W(k ) = W(k ) and V ( 1 - — = r - 1 + 8. □ 

ti v Pi j 

In applying (|4.3p to the PFF problem, k is taken to be Q(x n — l)(y n — 1); in fact, by the 
discussion in Section[2]we may take k — Q(x n — l)(y n ~ 1). Generally, we take go(x) = fo(x), 
although if necessary, a more general set of "complementary divisor triples" or the full form 
of Corollary [3J3 can be used. 

We illustrate the direct use of the sieve in dealing with the case when n* = q — 1 . 

Proposition 4.3. Let q(> 4) be a prime power and n(> 3) G N. Suppose n* = q — 1 > 2. 
The pairs (g, n) = (5, 4) and (4, 3) are not PFF. Otherwise, {q, n) is a PFF pair. 

Proof. We use a (k ,r) decomposition of k = Q(x n — l)(y™ — 1). Here Q = ^_~* 2 and all 
polynomial atoms are linear. 

As a first step, we use the additive sieve (alone) with fo{x) = go(x). Clearly X j q ^ and 
T^y have the same number, I say, of (linear) factors. To ensure that 8 is positive, of necessity 
21 < q. Specifically, for q odd (whence n* even) take I — n*/2. Then 8=1—— = - and 
A = 2^fi + 2 = n* 2 + 1. Moreover, W(f ) = W{g Q ) = 2 n * I 2 . Thus flOJ) becomes 

q n/2 > 2 ™*+i( Tl * 2 + 1)W(Q). (4.5) 
Otherwise, for q even (whence n* odd) take t = (n* — 1)/2. Then 8 = | and A = ,J -f^ + 2 = 

(n'-2)(n- + l) + 2 = n- 3 -n-+2 < _ NqW; ^ (/q) = jp^o) = 2 («« + l)/2_ Accordingl y ; 

remains a valid sufficient condition. 

T1 /4 

By Lemma T3.71 W(Q) < cq-^==. Hence we obtain the sufficient condition 

,n/4 > Cq2«(( g + 1) (46) 

- 1 
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First assume that n — n* . Then inequality (|4.6[) is satisfied whenever n = q — 1 > 37. 

Therefore we can suppose q < 37. Next, since q = n + 1 < 37, a straightforward calculation 

yields that ui(Q) < 33. Now (|4.5|) yields the sufficient condition 

(n + lW 2 . , 

1 - ' > 2 n 2 + l). 

2«+33 v ' 

This is satisfied whenever n > 26 (q > 27). We may therefore assume that q < 25. Another 
repetition of the additive sieve (without factorization of q n — 1) disposes of q — 25. Next, 
we introduce a non-trivial multiplicative component to the sieve (i.e., too ^ Q)- Factorize 
Q and take Too to be the product of all the primes in Q which are less than q (these are 
"worse" than all the linear polynomials p in k since the latter have \p\ = q). This deals 
with 16 < q < 23 (or 25). We illustrate in the case when q — 17. Here n = 16 and Q 
has prime factors 3,5,29,18913,41761,184417, so that to = 15. Take t = 6. Then r = 16, 

S = i-^-Tsb-Jik-TsHTT-lf > °' 2595 ■ ■ ■> A = 59J9 ■ ■ ■ and W ( k o) = W(m )W(gf = 
2 2 . 2 20 _ 2 22^ Hence (iy(fc )A)(2/n) < 12.24 < 17. 

Direct verification deals with five of the seven remaining cases (7 < q < 13): see table 
below. On the other hand, when q = 5, given a root a of any of the 32 primitive quartics over 
F = GF(5) for which the coefficients of x 3 and x are both non-zero, either a or 1/a is not 
free over F. Hence (5,4) is not a PFF pair. Similarly, when q = 4, none of the 12 primitive 
cubics is a PFF polynomial. 

In the case when n > n* , condition (|4.6|) is satisfied for q > 11 with n > 2n* , for q > 7 
with n > 3n*, for q > 4 with n > 5n*, and for q = 4 (whence cq = 2.9) for n > 8n* = 24. 
The only pairs not covered by this are (8, 14), (4, 12) and (4, 6). For (8, 14) direct substitution 
in condition (|4.5|) yields the result. For (4, 12), use (|4.3|) with multiplicative sieving alone. 
Specifically, Q = 5 • 7 • 13 • 17 • 241. Take the core to be (x 3 - l)(y 3 - 1) and let all the t = 5 
primes in Q be sieving primes. Then 5 > 0.5172 and (2W(k )A) 2 / n < 3.29 < 4. Finally, a 
PFF polynomial of degree 6 is given in Section 177X1 

To complete the proof here is the promised table of PFF polynomials. 



(?,») 


PFF polynomial 


polynomial for u 


(13,12) 


x 12 +x 11 ~3x + 2 




(11,10) 


x w + x 9 _ 2x + 2 




(9,8) 


x 8 - (u - l)x 7 - x 6 - zfi - (u + l)x A + (u - l)x 3 + (u + l)x 2 - X - u 


u 2 — u — 1 


(8,7) 


x 7 + x 6 + (u + l)x 5 + (u 2 + l)x"- + (u 2 + u + l)x 3 + u 2 x 2 + 111 + u 2 + u 


u 3 + u + 1 


(7,6) 


x 6 + x 5 + x 2 - x + 3 





□ 
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4.1 Key strategy: applying the sieve in the general case 

In this section, we derive an inequality which provides a sufficient condition for a pair (q, n) 
to be a PFF pair in the general case, by considering a specific factorisation of x n — 1 followed 
by a "core-atom" application of the sieve. The universal value of this strategy can be judged 
from the fact, in what follows, only a single case, namely (2,21), arose for which another 
factorisation succeeded where the key strategy failed. While the sieve has both an additive 
and multiplicative component, we note that it is often possible to obtain our desired result by 
using the additive part alone; correspondingly, we state two versions of our main inequality. 
The multiplicative part of the sieve is a useful tool in dealing with cases where the value of q 
is small. 

Denote by s the positive integer ord„» q, i.e. n* \q s — 1 with s minimal; then every irreducible 
factor of x n — 1 over F has degree dividing s. Write x n — 1 as g(x)G(x), where G is the 
product nl=i Gi of the (r, say) irreducible factors (G\, . . . , G r , say) of degree s, and g is the 
product of those with degree less than s (with g = 1 if s = 1). Let m := degg. Note that 
r = " ~ m . For the next result suppose that the set of w(Q) distinct prime divisors of Q is 
partitioned into a set of t "sieving" primes . . . , It} and a set of u primes whose product 
is the multiplicative core mo- Thus t + u = lu(Q); in particular u = lu(Q) when there is no 
multiplicative sieving. 

Proposition 4.4. Assume the notation defined above. Then N(Q,x n — l,y n —l) > whenever 

<r'» > 2^w {Q )w( 9 r ( + + 2 ^ t (4 . 7) 

\sq s (l - Ei=i tJ ~ 2 i n ~ m ) J 

provided the displayed denominator in the right side of 7[ ) is positive. 
In the case of additive sieving only, we have the sufficient condition 

q^ > 2W{Q)W{gf ( V(2(n* -m)-s) + \ 
\ sq — 2(n — m) J 

provided the denominator in <\4-<ty is positive. 

Note. Since n*\q s — 1 the denominator in (|4.8[) is always positive unless s — 1 and n* = n = 
q — 1 (which case is covered by Proposition ^. 311 . 

Proof. Take 2r + t complementary divisors with core k — m Q g(x)g(y), namely {k Gi(x) , i = 
1, . . . ,r} , {k G t (y), i=l,...,r} and {k li,i = l,...,t}. 
Then N(Q,x n -l,y n - 1) is positive, by lfO)l . if 

q^ > 2W( mo )W(gf ( ,J r V~L r T + 2 ) > 
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i.e., since rs = n* — to, if (|4.7p holds. 

□ 



5 Some special cases 

Before treating the problem in its most general setting, we give separate consideration to some 
special cases, where the values of q and n are related, or when n is of a distinguished type 
(e.g., prime). 

Proposition 5.1. Let q (> 5) be a prime power and let n (> 3) G N. Suppose that n* (> 2) 
divides q — 1 but n* =/= q — 1. Then (q, n) is a PFF pair. 

Proof. Here we have G(x) — x n — 1, g(x) — 1 and, since (n, q — 1) = n* , we have Q = 
(q n - l)/(n*{q - 1)). Moreover s = 1 and to = 0. Note that here 3 < n* < (q - l)/2; if 
n* < (g - l)/2, then n* < (q - l)/3. 

Inequality (|4.8[) yields the sufficient condition 

^ > 2^(0) f 2 "'(g- 2 ) + g ) . (5.1) 

V g - 2n* y 

Using the basic bound ^(Q) < [ ri »^ 1 9 _ 1 / g )]i/4 we obtain the sufficient condition 

t> (^fl!^)^(_ p i w )'^. 1 , M 

say. Clearly, Ti — > co as n* approaches |. We shall show that an appropriate upper bound 
T2 for Ti decreases in the range 3 < n* < ^jp. 

Since g — 2n* > 1 and n* (1 — 1/q) > 1, to begin to analyse (|5.2p . we can replace it by the 
weaker sufficient condition 



q > (2c Q q(2n* + l)) 4 /(™+D := T 2l (5.3) 

say. 

We first consider the case when n = n* . We begin by assuming that n > 10: thus q > 23. 
Taking natural logarithms, 

logT 2 = — --(log(2cQg) + log(2n + 1)). 

71+1 



For fixed q, differentiating with respect to n we obtain 

4 

(n + 1) 



Tn l0gT2 = - (^TTP (^ 2c ^( 2 " + !) - f 1 + ^Vl 
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which is negative since log(4n + 2) > 1 + 9k 1 +1 for all n > 1. So, in the range 10 < n < 2=1, 
the maximal value of T2 is attained at n = 10: it is certainly less than g for g > 23. 
Now assume 3 < n < 9. Since q — 2n > q — 18, we can replace ()5.2[) by 




say. Taking logarithms and differentiating, we find that T3 is a decreasing function if 



which holds for q > 18 (since log 14 > 8/7). The maximum value of T3 occurs when n = 3; it 
is less than q for q > 14cq + 18, i.e., g > 86. This establishes the result except when q < 87 
and 3 < n < min(9, 2=1). 

Using (|5.ip , with the cq bound, we find from a computational check that the result holds for 
all remaining (q,ri) except (19, 9), (17, 8), (19, 6), 13, 6), (16, 5), (11, 5) and appropriate values 
of (q, 4), n < 29 (5 values) and (q,3),n < 49 (9 values). For all remaining values, u)(Q) < 4; 
taking exact values deals (via l|5.1[) l with all pairs except (7,3), (16,3), (9,4), (13,4), (11,5), 
(13, 6). Invoking the multiplicative part of the sieve also, i.e., using inequality (|4.7p . yields the 
results for (13, 6) (Q = 7- 61- 157, m = 7) and (16, 3) (Q = 7 ■ 13, m = 7). Direct verification 
establishes the other four cases (see table below). 

Now suppose n > n* , and replace n + 1 by 2n* + 1 in (|5.3|) to obtain the sufficient condition 



say. We begin by assuming that n* > 5 and q > 13. Taking logarithms and differentiating, 



in condition (|5.4p . we find the result holds for q > 9 (and so in every case). 

Finally we consider 3 < n* < 4. Since n* < 4, we can use a final sufficient criterion, namely 



say. Again by differentiation, we can check that T5 is a decreasing function when q > 8. The 
maximum value of T5 occurs when n* = 3; this is less than q when q > 13. This leaves only 
n > n* with q = 13, n* = 3,4. Using n > 13n* in the sufficient condition yields the result. 



q > (2c Q q(2n* + l)) 4 /(2n*+D := T 4 , 



(5.4) 
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(q,n) 


PFF polynomial 


polynomial for u 


(13,4) 


x 4 + x 3 — x — 2 




(11,5) 


x 5 + x 4 + 3x - 2 




(9,4) 


x A — x 3 + x 2 + x — u + 1 


u 2 — u — 1 


(7,3) 


x 3 + x 2 + 2x - 3 





The following simple lemma improves Lemma |3 . 71 under the stated conditions. 

Lemma 5.2. Let n > 5 be prime, and let h € N be squarefree with each prime divisor of h 
congruent to 1 modulo In. Then 

W{h) < ft 1 / 4 , 

except when n = 5 and h = 11. 

Proposition 5.3. Let q (> 5) be a prime power and let n G N. Suppose n* (> 5) does not 
divide q — 1 and either n* is prime or n* = q + 1 iyj£/i g euen. TTien (g, n) is a PFF pair. 

Proof. In this case, x n — 1 factors as (x — l)G(x) where G is a product of w ~ 1 factors of 
degree s. We have s > 2 (s = 2 if n* = q + 1); m = 1, (n, q — 1) = 1 and Q = g J^ 1 odd. 

By inequality (|4.8[) of Proposition 14.41 we have the sufficient condition (for N(Q, x n — 
l,y"-l)>0) 

g" /2 -8^(Q)f ; 2(n 2 ( ~.-l) +i) >Q; (5-5) 

this certainly holds if 

A = A(g, n, *) := (<z"( g - l)) 1 / 4 - 8c Q ^^ ^'^ + 1 J > 0. 
Concentrating on the "worst-case scenario" when n = n* , we require 



A(q, n*,s) = (<f* (g - l)) 1 / 4 - 8CQ | 2( "1 



1 > 0. (5.6) 

In (|5.6|) we can take cq < 2.9 since Q is odd. In fact, when q and n are odd and n is an odd 
prime, Lemma 15.21 applies and we can take cq = 1. 

Evidently, A(q,n*,s) is an increasing function of g (with n*,s fixed) and of s (with q,n* 
fixed). It is also increasing with respect to n* with some qualification as regards to small 
values of q, s. In fact, with cq = 1, by differentiation, for given odd q and s — 2, A is an 
increasing function of n* in the range (q, n*) = (5+, 9+), (7+, 6+), (9+, 5+). For even q (take 
cq — 2.9), the corresponding pairs are (8+,6+), (16+, 5+). For s = 3, the pairs need to be 
(5+,6+), (7+,5+), q odd; (8+, 6+), (16+, 5+), q even. For s > 4, any pair (5+,5+) (q odd) 
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or (8+, 5+) is in a region of increasing A. Within the above framework, it suffices to establish 
the result for smallest q and n. It also suffices to take least s, i.e., s = 2. 

In the general case, by computation, the result holds for (25+, 5+), (16+, 7+), (9+,9+), 
(7+, 11+) and (5+, 17+): in each case within the range of increasing A with n* . 

Suppose first that n — n* . For the pairs (q,n) not covered by the above, a number 
are simply excluded by Lemma 12.31 For all but two remaining pairs, A(g,n, s) is quickly 
calculated to be positive; specifically, when (q,n,s) = (19, 5, 2), (13, 7, 2), (11, 7, 3), (9, 7, 3), 
(5, 17, 5), (5, 13, 4), (5, 17, 16), (5, 19, 9) or (5, 23, 22). The final two pairs are (9, 5) and (8, 9): 
in each case s = 2. For these, W(Q) = 4, 8, respectively and the sufficient condition (|5.5p 
holds. 

Finally, suppose n > n* . In the A definition and condition (15. 6|) . replace in the first term 
q n (q — 1) by q 3n (q — 1) (q odd) and by q 2n {q — 1) (q even). Also, set cq = 1 or 2.9 according 
as q is odd or even. Then, easily, A(5, n*, 2) and A(8, n* , 2) are increasing and positive in the 
respective cases. This completes the proof. □ 

Proposition 5.4. Let q (> 5) be an odd prime power and let n S N. Suppose n* — 21 > 6, 
where either I is a prime not dividing q — 1 or I = |(g + 1) with q = 3 (mod 4). Then (q, n) is 
a PFF pair. 

Proof. When I is prime then 2 < s\l — 1 (since q s = l(mod /)), whence n* — 2 = 2(1 — 1) is 
divisible by s. The same conclusion holds when I = i(q + 1), in which case s = 2. Indeed, in 
both cases, x n — 1 factors into two linear factors and " ~ 2 factors of degree s. (Note that 
(n*,q — 1) = 2.) Let 7 S = 1 if s is even, or 2 if ,s is odd: thus, since I divides 2 {q-i) then 
I < 2 Jq 9 -i) ■ Apply Proposition 14.41 with m = 2. By inequality (|4.8p . we have the sufficient 
condition 

9 "/ 2 - 6AW(Q) ^ "* ( ~ 2 2) + lj > 0. (5.7) 
which, as before, is certainly implied by 

A(q,n,s) := (q n (q - l)) 1 / 4 - ^i CQ (j^Z + X ) > °' 

Concentrating on the "worst-case scenario" when n — n* , we require 

A(g,n*,s)>0. (5.8) 

As in Proposition I5.3[ it suffices to establish the result for smallest q and n. We take s = 2, 
7 S = 2 and cq < 4.9. 

By computation, the result holds for (47+, 6+), (23+, 8+), (16+, 10+), (11+, 12+), (9+, 14+), 
(7+, 16+) and (5+, 21+). We may now assume that q < 43. 
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Suppose first that n = n* . Note that, for n > 14, the only case which remains is (5, 14). 
When n = 6, we find that W(Q) < 2 5 for all q < 47 with q ^ l(mod 6). Using this, (|5.7|) gives 
the result for q > 19. Indeed, for q < 19, all except q — 11 have W(Q) < 2 4 , which gives the 
result for q = 17. This leaves just q < 13 when n = 6; in fact, only (5,6) (Q = 2 • 3 2 • 7 • 19 • 37) 
and (11, 6) (Q = 3 2 ■ 7 • 31). Using both the additive and multiplicative power of the sieve, i.e., 
using inequality (|4.7[) . gives the sufficient condition 

With i = 3, this yields the result for q — 11 (Zi — 7, I2 — 19 and £3 = 37). This leaves just 
q = 5. When n = 8, using the additive-only estimate with W(Q) = 2 3 and j s = 1 gives the 
result for (7,8). When rt = 10, all valid q < 16 have W^Q) = 2 4 ; using this value in the 
additive-only inequality yields the result for all q > 7. Finally, using W(Q) < 2 5 deals with 
(5, 14). Direct verification deals with the remaining case: the pair (5,6) has PFF polynomial 
x e + + x 3 + x 2 — x — 2. When n > n* , taking in* in place of n* in the first term of condition 
(15. 8p yields the result for all pairs. □ 



6 Larger fields and degrees 

It is necessary to deal individually with fields of smallest cardinality, namely 2, 3 and 4, and 
their treatment is deferred to Section [71 Here we suppose q > 5. Even so, it turns out that F5 
and F7 require closer attention. From what has been accomplished so far we may also assume 
that n* > 8. 

We make the following definitions. For g as defined in Section 14.11 to = ui(q, n) is the 
number of distinct irreducible factors of g (so W(g) — 2 W ), and p = p(q, n) = u ( q,n > . For later 
use, given n also define p* = p(q, n*), so that p* / p = n/n* is the power of p in n. As in Section 
14.11 s denotes the degree of the irreducible factors of G. We can suppose that s > 2. Also set 
ni := gcd(n,q - 1). 

Lemma 6.1 ( 5J). Assume that n > 4 with p\n and q > 4. Then the following hold. 

(i) If n = 2n\ with q odd, then s = 2 and p = 1/2; 

(ii) if n = 4ni with q = l(mod A), then s = 4 and p — 3/8; 

(iii) if n = 6n± with q = l(mod 6), then s = 6 and p = 13/36; 

(iv) otherwise, p < 1/3. 

Because the bounds of Lemma 16.11 (taken from [5] ) are insufficient in themselves when 
q = 5 or 7, there is some difficulty for these field cardinalities. We overcome the obstacle by a 
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numerical result related to Lemma 13.71 bounds of similar type (such as Lemma 1 7. 5 p will occur 
in Section [7]) . 

Lemma 6.2. Suppose uj(h) > 49. Then 

W(h) < h 1 / 6 . 

Proof. By calculation the result holds when co(h) = 49, since then h is at least the product of 
the first 49 primes. The result follows since the 50th prime is 229 > 2 6 . □ 

Write the radical of Q as mopi ■ ■ - Pt, where too is the core and pi , . . . , pt are the (multi- 
plicative) sieving primes. When t = there is no multiplicative sieving. Set u := w(too); thus, 
often u = uj(Q). In this context, the basic form of (|4.7[) in Proposition 14.41 takes the shape 
(|6.ip with (|6.2[) or (|6.3|) below (because n* —m = n* — pn < (1 — p)n): by contrast, the refined 
form does not employ this simplification. 

Proposition 6.3. Suppose that 

q > R(n), (6.1) 

where 

r / ad-?)" +t _ 1 \) 2/n 

R{n) =R(n;q) = | 2 2 ^+"+ 1 (^— + 2 j j . (6.2) 

and 6 = 1 — Y^—y ^ (with 6=1 when t = 0). Then (q, n) is a PFF pair. 

In particular, when additive sieving alone is being used (i.e., t = 0), then R{n) takes the 
form 

( / 2(l-p)n _ j \ ^| 2 /" 

fl(n) = i?(n;g) = | 2 2 p«+«+ 1 s 2(1 _ p)n +2J j . (6.3) 



In t/ie refined form of Lemma \6.3\ both occurrences of (1 — p)n are replaced by n* — pn in 
each of (TO)) and (fQ|) . 



Note also that R(n; q) depends on q (as well as n). Inasmuch as it is obviously a decreasing 
function of q (for fixed values of the other parameters), we shall apply it either when q has a 
specified value or when q > qa with qo specified. In what follows we shall, for convenience of 
calculation, use alternative weaker (i.e., larger) forms of R{n) (to be denoted by Ri(n), R2(n), 
etc): it will be sufficient to show that (|6.1|) holds for the relevant form. 

We divide the discussion into two categories according as to whether p > l/3orp< 1/3 as 
described in Lemma RTTI When n* < n then p(q, n) < p( - g p " ^ < p ^ q '™ ^ . This means that such 
pairs fall in the second category: moreover, from the size of p{q,n), these scarcely feature in 
the discussion. 
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Proposition 6.4. Suppose q>5 and n>8 with n \ (q — 1). Suppose also that p(q,n) > 1/3. 
Then (q, n) is a PFF pair. 

Proof. The circumstances where p > 1/3 are delineated in Lemma |6. II In these, put n = dn\ 
where d — 2, 4 or 6. Then Q = d ^ q Z\^ an d n* = n < qd. By means of the simple bound (|3.6p 
for W(Q) and without multiplicative sieving, we obtain (as an alternative to R(n)) 

«■<"> : - f 22 " ,+ '(«)" 4 (3pr +2 ) } (64) 

(with c < 4.9 and q > go) for use in (|G.ip . 

Because n. 1 '™ decreases as rt increases, it is seen (with a little effort) that R\in) decreases 
as n > 8 increases under the given conditions. 

^From Lemma [B~Tl suppose first that p = 1/2 (with s = 2 and d = 2 ). Then i?i(8; 59) < 57. 
Hence (q,n) is a PFF pair whenever q > 59. Indeed, i?i(12;43) < 41.6, and i?x(16;37) < 34.7, 
etc., thus reducing further the list of possible exceptional pairs. Since n < 2q, it can thus 
be quickly checked (using Ri for R in (|6.1[) ) that the only pairs not shown to be PFF pairs 
are (5,8), (7,12), (9,16), (11,20), (13,8), (13,24), (17,32), (19,12), (19,36), (25,16), 
(29,8), (31,12), (37,8), (53,8). 

These 14 pairs were then tested using (|6.3p . having calculated u by factorizing Q. This 
was successful except for (5,8), (7, 12), (9, 16), (13,8). The final stage for these pairs was 
to sieve multiplicatively, also. Thus, for (9, 16), Q = 2 • 5 • 17 • 41 • 193 • 21523361, the largest 
four primes being the sieving ones. With u = 2 this yields i?(16) < 7.4 and hence a PFF pair. 
Similarly, for (13,8), Q = 2 ■ 5 • 7- 17- 14281, and, again with four sieving primes, this yields 
R(8) < 11 and another PFF pair. This process fails, however, for two pairs (5, 8) and (7, 12). 
For these we list an explicit PFF polynomial as follows. 



(q,n) 


PFF polynomial 


(7,12) 


x 12 +X 11 - 3x - 2 


(5,8) 


a; 8 + x 7 — x 2 — x — 2 



Next, suppose from Lemma that p = 3/8 (with s = 4 and d = 4). This implies that 
n > 16. We calculate i?i(16;19) < 17 and i?i(13;13) < 13. This excludes only the pairs 
(5,16), (9,32) and (13,16). In all these cases, w(Q) < 7. Using this in (|6.3p with u = 7, 
we see that (13,16) and (9,32) are (comfortably) PFF pairs. For (5,16), use multiplicative 
sieving. Here Q = 2 2 • 3 • 13 • 17 • 313 • 11489 and we take u = 2, t = 4 to yield S = 0.8610 and 
i?(16;5) < 5. 
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Finally, suppose from Lemma 16. 1[ that p = 13/36 (with s = 6 and d = 6). This implies 
that n > 36 and i?i(36; 11)) < 10.9. This does leave the pair (7, 36) but an application of (|6.3[) 
with u = 11 yields i?(36; 7) < 5. □ 

For the remainder of this section we assume p < 1/3. Consider the function i?(n; q) defined 
by (|6.3[) . In the situation to which it applies, s and p are determined by q and n. Nevertheless 
it is useful sometimes to consider R(n; q) (and similar expressions) as functions of n, q, s and 
p, more loosely related. (For instance, since s > 2 is the least integer for which n* divides 
q s — 1, then n* < q s and s < <fi(n*) < n* .) It is important to ensure that sq s < 2(1 — p)n so 
that the right side of (|6.3|) is a well-defined positive quantity. It is a consequence of the next 
lemma that, for given n, q, s with 2 < s < n and 8 < n < q s (indeed n < q 2 /2 when s = 2), 
then i?(n; g) is an increasing function of p for < p < 1/3. 

Lemma 6.5. for /ixed positive integers n,q,s with 2 < s < n and 8 < n < q s (indeed with 

2(l-p)n 



n < <z 2 /2 w/ien s = 2), set 



-(p) = 2 2pn 



- 1 



1 

sq" 



2(l-p)n 
s 

Then, r(p) is an increasing function for < p < 1/3. 
Proof. Differentiate to obtain 



T'(p) = AT-[log2(2(l-p)n- s)(sq s - 2(1 - p)n) - s(q s - 1)], (6.5) 
(sg s -2(l-p)n) 2 



where if = -p — ^ ^— - is a positive function (of all the variables) 



If s = 2 then, since < p < 1/3 and n < q /2, 

An An 
T , (p)>\0g2(—-2)(2q 2 ~q 2 ) - 2q 2 = q 2 (— log 2 -2) - 2) > 0, 

since n > 8. 

If 3 < s < n/2, then, by l|B3|l . for < p < 1/3, 

r'{p)/K > n\og2{^- l -){s-2)q s -sq s 
= q°(s(^ log2-l)-f log2 

> a^3(f l 0g 2-l)-f log 2) = <f(ylo&2 :] j ■ u. 

since n > 8. 

Finally, if n/2 < s < n (< 5 s ), then, again by (|6.5p . 

71 I 71 4:71 

r'(p)/X > -( S g s -4 S )log2)- S9 s = S |-log2-l)g s -ylog2 



> 



71 An 
n(-log2-l)-ylog2 



TiS 

= — \{n log 2 -3) -4 log 2] > 0, 
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again since n > 8. □ 

In practice, it is convenient to employ a larger "starter" function R(n;q), derived from 
R(n) by taking p — 1/3, and then using the facts that n < q s and s > 2. 

(JZ(n; q) <) R(n) = R(n; q) := {2 (2/3)n+u+1 (2n - 1)} 2/ ". (6.6) 

In the result which follows we employ suitable modifications of these ideas. 

Proposition 6.6. Suppose q>5 and n* > 8 with n* \ (q—l). Suppose also that p(q,n) < 1/3. 
Then (g, n) is a PFF pair. 

Proof. As usual, we generally suppose for simplicity that n — n* in the theoretical discussion. 
Nevertheless, in the treatment of residual (more delicate) cases, pairs (q, n) for which n > n* 
are also considered where relevant. 

Case O: n* = q 2 — 1. 

In this situation, the argument about R{n) increasing with p (to be used elsewhere) fails. 
Here p = l/(q+l) and R x {q 2 - 1) (defined by ijOjl) has the form 

R x {q 2 - 1) = (c2 2 "- 1 ( 9 3 - q 2 - q + 2))^-^. 

With c = 4.9, it is quickly seen that R\(q 2 — 1) decreases and is less than 9.8 for q > 11. 
Moreover, when q = 9, we can take c = 3.2 and i?i(9 2 — 1) < 7.6 and when q = 8, we can 
take c = 2.9 and i?i(8 2 - 1) < 7.8. For the pair (7,48), with s = 2 and u = 13, we have 
i?(48; 7) < 2.69 < 7. The discussion of the final pair (5, 24) is incorporated with the figures for 
the most delicate cases in Case II below. In what follows we assume (as we may) n* < <? 2 /2 
when s = 2. 
Case I: q > 8. 

Replace p by 1/3 and use Lemma T3. 71 in (|6.3[) . It therefore suffices that q > R2(n), where 

R 2 (n)=R 2 (n;q,s) = {^ 3) " +1 ^^ (j^jL + 2 ) j ' , (6.7) 



where c < 4.9. Here a suitable starter form, derived from (|6.7j) by using s > 2 and n < g s is 

R 2 (n) = R 2 (n;q) = | c2 ( a /3)n+i^z_^_| 4/ " . (6 8) 

Evidently ^("J ?> 1/3)) increases as n or g decreases. With c = 4.9 , we have ^2(8; 49) < 47.5. 
Hence the result holds for q > 49. 

We treat prime powers q < 47 first by R 2 {n), to establish the result for (potentially) large 
values of n and s, and then by R 2 (n) for more critical values of n, with s (close to) 2. Indeed, to 
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begin, suppose 37 < q < 47. Take c = 4.9. Since R^IO; 37) < 36 the result holds for this range 
of q, provided n > 10. But also i? 2 (8;37,2) < 32.1. Hence the result holds unconditionally. 

Smaller values of q are dealt with individually. For example, take q — 11 (so that c = 4.5 
will do). Then i? 2 (45; 11) < 10.94, so that we can assume n < 44 with n/a prime or twice 
a prime or 12 (by Propositions 15.31 and 15. 4| ). Further, i? 2 (37;ll,2) < 10.996, and indeed 
i? 2 (35;ll,3) < 10.6 (rules out n = 35), and J R 2 (26;11,6) < 10.94 (rules out n = 28,36). 
We conclude that n £ {8, 9, 15, 16, 18, 20, 21, 24, 25, 30}. For these remaining values, calculate 
u := lo(Q) for use in Proposition 16.31 bv means of R(n; 11) given by (|6.3[) with s = 2 and 
p = 1/3. In fact, for this set of values of n, we have u < 11 (attained when n = 24); indeed, 
for n = 8, 9, we have u < 4. Now, with u = 11, we obtain i?(15; 11) < 10.7 and, with u = 4, 
we obtain i?(8; 11) < 9.6. So the discussion of the case q = 11 is therefore complete. 

Suppose, next q = 9 (so that one can take c = 3.2). Note that we need also to consider 
values of n > n* but that, by previous results and since n* > 8, it can be supposed that 
n > 16. Since -R 2 (73; 9) < 8.98, it can be assumed that n < 73. Some smaller values of n can 
be ruled out by R 2 (n). For example i? 2 (56;9,3) < 8.9; i? 2 (55; 9, 10) < 8.2; i? 2 (64; 9, 6) < 8.2 
(rules out n = 64, 68); i? 2 (49;9,21) < 8. The values of n which remain lie in the set 
{16,20,24,25,28,32,35,36,40,44,48,52,60}. By calculation, u < 17 (attained at n = 60); 
indeed, u < 10 (attained at n = 40) except for n <E {24,36,44,48,60}. Finally, take p = 
1/3, s = 2 in (JHISD. With u = 17, we have i?(25;9) < 8.8, with u = 11, then R(18) < 8.6, and, 
with u = 6, then i?(16; 9) < 6.4. So the discussion when q = 9 is complete. 

Finally, suppose q — 8 (so that one can take c = 2.9). The most delicate degree (n = 9) 
has been dealt with in Proposition [531 more generally, previous results ensure we may assume 
n > 15. Since ^(117; 8) < 7.991 we can suppose that n < 116. For 88 < n < 116 then 
s > 3 and i? 2 (88;8) < 7.99 and the result holds. Assume n < 87, Now take p = 1/3 and 
s = 2 in (JOJ). If 33 < n < 87, then u < 20 (attained at n = 60,84) and i?(33;8) < 7.6. If 
20 < n < 32, then u < 11 and i?(20; 8) < 7.8. The values of n = 16, 17, 19 are excluded by 
previous considerations: the remaining values n = 15 or 18 have u = 5 so that i?(15; 8) < 6.2. 
Thus Case I has been completed simply by additive sieving with p = 1/3. 

Case II: q = 5 or 7. 

This follows broadly the same pattern as Case I, except that, because 2 8 / 3 > 6.34, the expres- 
sion i? 2 ^) is useless when q = 5 and ineffective when q = 7. We therefore proceed as follows. 
Suppose n* > q 2 so that s > 3. Suppose first that also oj(Q) > 49. By Lemma T6.2I and the 
fact that f — f = f : w e obtain as an alternative to (|6.7[) 



( 




3/n 



R 3 (n) = R 3 (n;q,s) 



(6.9) 
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Here the starter form, derived from (|6.9p using s > 3 and n < q s , is 

R 3 (n)=R 3 (n;q) = { c2 W _g?jd^ j' " . (6.10) 

Now # 3 (58;5) < 4.998 and E 3 (16;7) < 6.98. Summarising, whenever ui(Q) > 49, we have 
shown that necessarily n < 57 (q — 5) and n < 15 (q = 7). But, easily, if n < 57 (say), then 
oj(Q) < 49. 

Hence we may suppose that oj(Q) < 48. Since s > 3 the appropriate starter form for R(n) 
itself (in place of (|6.6p ) is 

i?(n) = i?(n; 5, u) := {2 < - 2 /^ n+u+1 {An + l)/5} 2/ " 

For the rest, we focus almost exclusively on the more delicate case when q = 5. Then 
with -R(113; 5,48) < 4.98. So assume n < 112 in which case since Q < (5™ — l)/4, necessarily 
w(Q) < 44. Moreover, since i?(104;5) < 4.99 (with p = 1/3 and s = 2), we can suppose that 
n < 103. Indeed, by repetition of this argument using R(n; 5,u) and smaller values of it, we 
conclude that we can suppose n < 84. 

The next stage (with n < 84) is to calculate the true value of oj(Q) and use R(n) (still with 
p = 1/3 and s — 2). We find that i?(44; 5) < 4.98 so that we can assume n < 43. But then 
oj{Q) < 11 and, with u = 11, i?(33;5) < 4.97. Next, n < 29 and u(Q) < 8 and with u = 8, 
i?(26; 5) < 4.98. Further, with u = 4, R(21; 5) < 4.14. The values of n that remain belong to 
the the set {9, 12, 18, 24}. When the same exercise is applied to the field with q = 7, the only 
outstanding degree is n = 9. We tabulate the outcome of applying Proposition 16.31 in full, in 
one case using the form ()6.2|) for R{n). 



q 


n 


s 


P 


Q 


u 


t 


s 


R(n) 


5 


9 


6 


2/9 


19-31-829 


3 





1 


4.49 


5 


18 


6 


2/9 


3 3 - 7- 19 -31 -829 -5167 


4 





1 


3.85 


5 


24 


2 


1/6 


2-3 2 - 7- 13- 31 -313- 601 -390001 


8 





1 


3.91 


7 


9 


3 


1/3 


3 • 19 • 37 • 1063 


1 


3 


0.919 


4.82 



For the pair (5, 12), Proposition ^. 3l fails: in that case we found the explicit PFF polynomial 
x 12 + x 11 + x 3 - x 2 - 2x - 2. 

As a consequence, Proposition 16.61 is established. 

□ 
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7 Very small fields 



In this section, we study the smallest fields ¥ q when 2 < q < 4. For these it is imperative to use 
a smaller value of p than provided by Lemma 16.11 Variations of Lemma 16.21 are also invoked 
where appropriate. Further, more attention has to be paid than heretofore when n* < n: in 
particular the refined forms of Lemma 16.21 will be called on to resolve some smaller values. 

Lemma 7.1 Assume that n > 4 (p\ n). Then the following hold. 

(i) Suppose q = 4. Then p(4,9) = 1/3; p(4,45) = 11/45; otherwise p(4,n) < 1/5. 

(ii) Suppose q — 3. Then p(3, 16) = 5/16; otherwise p(3,n) < 1/4. 

(Hi) Suppose q = 2. Then p(2, 5) = 1/5; p(2, 9) = 2/9; p{2, 21) = 4/21; otherwise p(2,n) < 
1/6. 

7.1 The field F 4 

Here n* — n if and only if n is odd, whereas Q, a divisor of (4™ — 1), is always odd. 
Proposition 7.2. Suppose q = 4 and n 7^ 3. TTien (g,n) is a PFF pair. 

Proof. For the main working suppose n* > 4 and s > 1. For n odd, by Lemma [7.H p{n) < 1/5, 
except when n = 9 (p = 1/3) or n = 45 (p = 11/45). When n is even, p < 1/6 (with equality 
when rt = 18). Further, s = 2 when ?i* divides 15; s = 3 when n* divides 63; otherwise s > 4. 

Start from the sufficient condition (|6.1[) with i?(n) given by (|6.3p and it = w(Q). 
First suppose n* = 15 (the only situation in which Lemma 16.51 does not apply); thus 
p = 1/5. Since the expression 

2(n*— pn) 

E= * — + 2 (7.1) 

2(n*— pn) v ' 

in the refined form of (|6.3p here is equal to 46 and the (crude) bound W(Q) < 2.9 • 4™/ 4 holds 
(by |3.7p . it follows that inequality (|6.ip certainly holds whenever 

4 > (2.9 ■ 2 • 46) 20/ " = 266.8 20/n , 

and this is satisfied when n > 120. Thus, when n* = 15 it can be assumed that n < 60. Now 
suppose that n* 7^ 15. In order to construct a suitable starter function for larger values of n, 
by Lemma T6.5I replace p by a larger value (such as 1/5 or 1/6). To W(Q) = 2", again apply 
the bound W(h) < 2.9ft- 1 / 4 (Lemma |3.T|) . Using n < q s and s — 2(1 — p) < s, we see that 
4 > Rz{n) suffices, where 

f / 2(1 - p)n \ 1 an -<ip) 
R 3 (n) =R 3 (n;s,p) |s.8 M ^ + 1 ^ 1 
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with the appropriate larger value of p. Here Rz{n) decreases as a function of s and decreases 
as a function of n. 

If n y= 45) is odd and s > 4, then p < 1/5 and #3(71; 4, 1/5) < 83.4. If n is even then 
p < 1/6 and i?3(n; 2, 1/6) < 65.5. Since s > 4 whenever n* > 63, it follows that for a putative 
exception n to Proposition 17. 21 we may assume n < 83; indeed, n < 62 for n even. 

For these remaining possibilities (including those with n* = 15), we evaluate R(n) given 
by (the refined form of) (|6.3p with precise values for s, p and u — lo(Q): if it is less than q = 4 
there does exist a PFF polynomial for that value of n. To this end factorise x n — 1 over 
F4 and Q. For larger values of n and those for which n* is prime (in which case p = 1/n), 
comfortably i?(n) < 4. We tabulate the outcome in the more delicate cases with n > 10: in 
particular, the column headed R lists R(n) truncated to three decimal places. 



n 


s 


P 


u 


R 


n 


s 


P 


it 


R 


45 


6 


11/45 


11 


3.187 


21 


3 


1/7 


6 


3.063 


36 


3 


1/12 


12 


2.277 


20 


2 


1/20 


7 


2.392 


35 


6 


1/7 


9 


2.532 


18 


3 


1/6 


8 


3.815 


33 


5 


1/11 


8 


2.195 


15 


2 


1/5 


6 


5.539 


30 


2 


1/10 


11 


2.965 


14 


3 


1/14 


6 


3.085 


27 


9 


5/27 


6 


2.729 


11 


5 


1/11 


4 


3.238 


25 


10 


1/5 


4 


3.238 


10 


2 


1/10 


5 


4.337 



We conclude that if there is no PFF polynomial of degree n, then n £ {15, 10, 9, 7, 5}. For 
the values n = 10, 7, using also multiplicative sieving yields the result. Specifically, suppose 
n = 10. Then Q = 3 2 • 5 2 ■ 11 ■ 31 • 41, which has 5 prime factors. In (pT2]) . take u = 1, t = 4. 
Then 5 > 0.6524 which yields iZ(10) < 3.73 < 4. For n = 7, Q = 3 2 • 43 • 127. In this case, 
take u = 1, t = 2, so that 5 > 0.9688 and i?(7) < 3.93 < 4. 

Finally, we exhibit explicit PFF polynomials for the remaining degrees (including n = 6, 
held over from Proposition 14. 3p . For these, we use F4 = Fa(u), where u 2 + u + 1 = 0. 



n 


PFF polynomial 


15 


I 15 + X 14 + (U + 1)X 12 + (U + 1)2! 10 + X 9 + X 8 + X 7 + UX 6 - 


- ux 5 -\ 






9 


x 9 + (u + l)x 8 + ux 7 + (u + l)x 6 + ux 5 + 


ux 3 


-f (u 


+ l)x + u 


6 


X 6 + ux 5 + (11 + l)x 4 + (u + l)x 3 


+ 2; 4 


-u + 


1 


5 


x 5 + ux 4 + ux 3 + x + u - 


h 1 







□ 
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7.2 The ternary field F 3 

For the main part, again suppose n* > 4 and s > 2. Here any version of Lemma 13.71 valid for 
all integers is inadequate: the following numerical bound for large integers will be needed. 

Lemma 7.3. Suppose h is indivisible by 3 and w{h) > 52. Then 

W{h) < h 4 / 25 . 



Proposition 7.4. Suppose q = 3 and n ^ 3. Then (q,n) is a PFF pair. 

Proof. By Lemma 17. 11 if n* — n (equivalent to 3 \ n), then p(n) < 1/4, except when n = 16. 
If, on the other hand, 3|n, then evidently, p{n) < 5/48; indeed p(n) < 1/12 whenever n > 48. 

Again, start from the sufficient condition (|6.1|) with R(n) given by (|6.3|) and u — lo(Q). 
Suppose 3|n (i.e., n > n*) with n > 48 so that p < 1/12: in this situation Lemma [3.71 
suffices. Since n* < n,n* < q s — 1, s > 2 and p > 0, then E (given by (|7.ip ) satisfies 

E < + 2 < 9n - 7. 

By Lemma [3J] and the fact that p < 1/12, it suffices that 3 1 / 2 /2 1 / 3 > (9.8 • (9n- 7)) 2 /", which 
holds whenever n > 54. Hence we may assume n < 51 when 3|n. 

Now suppose 3 | n (so that n* = n). With Lemma [7.31 in view, suppose ui(Q) > 52 so 
that certainly p < 1/4 and s > 4. Since n = n* =/= 8, in J?(n) replace p by 1/4, as we may by 
Lemma 16.51 From (16.31) and Lemma |7.3[ we derive the sufficient condition 



3 17/25 /2> /' 2:::!,i " 



which holds whenever n > 205 and therefore whenever uj(Q) > 52. 

Continue to suppose 3 \ n with n > 55 and n ^ 80 (so that p < 1/4 and s > 5) but assume 
now that W(Q) < 51. We introduce a multiplicative aspect to the sieve by invoking R(n) as 
in (|6.2p . To show that that iZ(n) is increasing with p analogously to Lemma [B~5l consider 



r(p) = log 



2pn ( 2(l~p)(n/s)+t-l \ 
\S - (2(1 - p)n/sqs) J 



(7.2) 



with q = 3. Here we suppose (5 is bounded below by 0.42, an assumption that will be realised 
in applications. (In the first place, since p > and s > 5, this guarantees that S— (2(1 — p)/s) 
and so S — (2(1 — p)n/sq s ) are positive.) For fixed s, differentiate r(p) to obtain 

r'(p) = 2nlog2 - (1 _ p) + ^ _ 1)/2n) - {Saq s , 2n ] _ (1 _ p) ■ ( 7 ' 3 ) 
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with q = 3. Since < p < 1/4, n < 3 s , s > 5 and S > 0.42 it follows that r'(p) > 
2nlog2 — 4/3 — 20 = 2nlog2 — 64/3 which is positive because n > 16. 

Granted that S > 0.42 it can be concluded that, for a given n and t, r(n) and so R(n) are 
maximised when s = 5 and p — 1/4. This yields the condition 3 > Ri(n), where 



with t denoting the number of sieving primes and u those of the multiplicative core nio (|Q). 
To use (|7.4p . let the least u = 6 primes in Q contribute to the core mo- Then t < 45 is the 

number of sieving primes and 6 > ^ + ^ + -\ + ^ = 0.42734 .... Since ^(55.4) < 3 

there exists a PFF polynomial of degree n whenever n > 55 (n ^ 80). 

Summarising, whether or not 3|n, it remains to consider values of n < 53 and n = 80. 
One could apply further general applications of the sieve to some effect but instead we simply 
calculate R(n) given by (the refined form of) (|6.3p . In the table, the column headed R gives 
its value truncated to three decimal places. Only those degrees which produced a value of 
R(n) exceeding 2.2 are listed: none of these has n* < n. 



n 


s 


P 


(/ 


R 


n 


s 


P 


(/ 


R 


52 


6 


11/52 


6 


2.390 


14 


6 


1/7 


3 


2.780 


44 


10 


7/44 


8 


2.245 


13 


3 


1/13 


1 


2.243 


32 


8 


7/32 


6 


2.811 


11 


5 


1/11 


2 


2.520 


28 


6 


3/28 


6 


2.234 


10 


4 


1/5 


3 


4.208 


22 


5 


1/11 


5 


2.298 


8 


2 


1/4 


3 


8.122 


20 


4 


3/20 


5 


2.903 


7 


6 


1/7 


1 


3.023 


16 


4 


5/16 


4 


5.085 


5 


4 


1/5 


1 


4.720 



To supplement this table note that when n — 7 we can successfully use (|6.2[) by sieving 
also with the single prime divisor of Q — 1093: this yields R(7) < 2.694 < 3. Including cases 
held over from Proposition l3.8[ this leaves n £ {16, 12, 10, 8, 6, 5, 3} for which we obtain a PFF 
polynomial in every case by direct verification of the properties. In fact when n — 3 there is 
only one pair of PFF polynomials. 




(7.4) 
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11 


PFF polynomial 


16 


x le — x 15 — x e + x — x — 1 


12 


x 12 + x 11 + x 3 + x 2 + x - 1 


10 


x 10 + x 9 + x 7 + x 3 - x - 1 


8 


X 8 + x 7 + x 4 — X 3 — x 2 + x — 1 


6 


X 6 + X 5 + X 3 + x 2 + x — 1 


5 


x 5 + .x 4 — X + 1 


3 


x 3 + x 2 — X + 1 



□ 

We remark that we incorporated multiplicative sieving as a device to treat general values 
ol n > 55 (with 3 { n) in Proposition 17.41 Nevertheless, it is likely that for any specific value 
of n > 55 additive sieving using (|6.3p would be sufficient. A similar remark would apply to 
the proof of Proposition 17. 61 below. 



7.3 The binary field F 2 . 

A suitable numerical result on W(h) here is the following. 

Lemma 7.5. Suppose the odd integer h is such that u(h) > 175. Then W(h) < h 3 ' 25 . 
Proposition 7.6. Suppose q — 2 and n ^ 3,4. Then (q,n) is a PFF pair. 

Proof. The cases (2,n), n — 6, 12, 24 have been held over from Proposition 13.81 Otherwise, 
suppose that n* > 4, so that s > 3. Here Q — 2" — 1. By Lemma 1731 if n is odd (i.e., n* = n) 
and n > 21, then p < 1/6. If n is even and then p < 1/12 unless n* =5,9 or 21; indeed, if 
n > 42, then p < 1/12. 

Suppose first that n > 42 is even, so that p < 1/12. In Proposition ^. 3[ since < p < 1/12 
then R(n) given by the refined form of ()6.3|) satisfies 

R(n)< jw(Q)-2* +1 - |^fci + 2^| <|^(g).2f+ 1 .^^| 2/ ". (7.5) 

Since MK(<5) < 2.9 • 2™/ 4 , it follows that there exists a PFF polynomial of degree n whenever 
2 > 5.8 • - "~ > and so certainly when n > 108. 

The general argument with n even is taken somewhat further. Suppose n < 106. By 
calculation, uj{Q) < 21. Substituting W(Q) = 21 in (|7.5[) we find that 7?(86) < 2; hence we 
may suppose n < 84. Indeed, by repetition of this strategy we conclude there exists a PFF 
polynomial of degree n whenever n > 64. 
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Now suppose n (> 64) is odd so that n* = n, p < 1/6 and s > 7. By Lemma T6.5I we can 
replace p by 1/6 in R(n) given by (|6.3|) . In order to apply Lemma 17.51 suppose (temporarily) 
that additionally ui(Q) > 175. Since 1/2 — 1/3 — 3/25 = 7/150, n < q s and s > 7 we deduce 
that there is a PFF polynomial of degree n whenever 



and so whenever n > 139. Easily, this is implied by ui(Q) > 175. 

Accordingly, we can now suppose lo(Q) < 174. Introduce a multiplicative dimension to the 
sieve by applying the criterion of Lemma lirBl with R(n) given by (|6.2[) . By (|7.2p with g = 2 and 
provided 5 > 0.42, r(n) is increasing for < p < 1/6, since r'(p) > 2nlog2 — 7/6 — 100/47 > 
2nlog2 — 4 is positive. Hence in R(n) we may replace p by 1/6 and s by 7, to obtain the 
sufficient condition 



provided S > 0.42, where u is the number of prime integers in the multiplicative core. 

First take u = 13 so that t < 161. Then 5 > 0.4354 and i? 5 (144) < 2. Hence we can 
suppose n < 143. This implies u> < 27. Thus u + t < 28. Repeat the above process with 
u = 4, i < 23 and so (5 > 0.4353. Then i?(77) < 2 and we can suppose n < 75. Then 
uj{Q) < 16. Repeat once more with u = 3, S > 0.4787 to yield R(66) < 2. 

Consequently, for the last stage, whether n is even or odd, assume n < 65. As for Lemma 
17.41 simply calculate R(n) given by (the refined form of) (|6.3p . The table lists the outcome 
for values of n with 13 < n < 65 which produced a value of R(n) exceeding 1.8. Also included 
is n = 24 with s = 2, a case held over from Proposition 13. 81 



n 


s 


P 


u 


R 


n 


s 


P 


u 


R 


45 


12 


2/15 


6 


1.963 


24 


2 


1/24 


6 


1.887 


42 


6 


2/21 


6 


1.801 


22 


10 


1/22 


4 


1.717 


36 


6 


1/12 


8 


1.895 


21 


6 


4/21 


3 


2.662 


35 


12 


4/35 


4 


1.856 


20 


4 


1/21 


5 


1.941 


30 


4 


1/15 


6 


1.953 


18 


6 


1/9 


4 


2.290 


28 


3 


1/28 


6 


1.811 


15 


4 


2/15 


3 


2.892 


27 


3 


1/9 


3 


1.839 


14 


3 


1/14 


3 


2.438 


25 


20 


2/25 


3 


1.714 


13 


12 


1/13 


1 


1.814 



Beyond this table, degrees n = 11, 18 and 21 can be treated theoretically. For n = 11 use 
(|6.2[) by sieving also with the two prime divisors of Q = 23 • 89. This yields -R(ll) = 1.968 . . . < 
2. Similarly, when n — 18, sieve also with the 4 prime divisors of Q = 3 3 ■ 7 ■ 19 • 73. This 
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yields R(18) — 1.980. . . < 2. Finally when n = 21, for this occasion only, modify the key 
strategy for the additive sieve as follows. Over Fa, x 21 — 1 = P\ ■ Pa • P31 • P32 • -P61 ■ 
where the P's are distinct irreducible polynomials of degree indicated by the first subscript. 
For the sieve take the "core" to be P1P2 and the sieving irreducibles to be those of degrees 
3 and 6 together with the three prime factors of Q — 7 2 • 127 • 337. The crucial denominator 
5 - 4/2 3 - 4/2 6 = 0.2838 . . . and P(21) = 1.963 . . . < 2 

For degrees n* £ {15,14,12,10,9,8,7,6,5} (including some held over from Proposition 
13. 8[) . we obtain a PFF example in every case. We remark that, for n = 6, 5 there is, in each 
case, a single pair of reciprocal PFF polynomials. 



n 


PFF polynomial 


15 


x 15 + x 14 + x 4 + X + 1 


14 


x 14 + x 13 + x 9 + x 4 + x 2 + X + 1 


12 


x 12 + x 11 + x 9 + x 4 + x 3 + X + 1 


10 


a; 10 + x 9 + x 4 + x + 1 


9 


x 9 + x 8 + x 5 + x 4 + x 3 + x + 1 


8 


x s + x 2 — X + 1 


7 


X 7 + x 4 + X 3 + X + 1 


6 


X 6 + X 5 + x 2 + X + 1 


5 


x 5 + x 4 + x 2 + X + 1 



□ 
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